Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/611fa39f-ab5e-3811-9f35-42f68560182e.roa
File:                     611fa39f-ab5e-3811-9f35-42f68560182e.roa (raw, json)
Hash identifier:          uAoZFIFPHy7Of9QoHo3p+L5ZXBD2jzryEjUSLo35Q7g=
Subject key identifier:   70:EC:BD:D8:5B:09:01:42:91:E8:78:5E:41:7E:46:FA:0A:BF:DF:72
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FCFBE24032555B1430510
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/611fa39f-ab5e-3811-9f35-42f68560182e.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     203
IP address blocks:        130.174.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:cf:be:24:03:25:55:b1:43:05:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=c6a500c9-e319-4346-b06c-2de7702cf806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f4:5c:f0:f8:81:f5:f9:7d:65:bb:6f:e3:20:
                    72:6a:f9:5f:03:3a:25:e1:1f:27:c7:f9:dc:f8:02:
                    fd:88:8a:55:64:5e:a1:c4:f4:9d:87:f7:80:22:7d:
                    4a:96:e9:cf:2f:5b:e2:f3:ab:a2:8e:6b:1e:41:72:
                    4a:37:20:c3:44:86:b0:69:10:d1:6e:a9:3e:a0:e3:
                    55:dd:5c:3d:33:e9:d3:4b:7a:70:d7:e6:c0:b9:bf:
                    58:68:79:b3:26:59:ae:56:bd:f7:0a:77:f9:a0:91:
                    b6:50:4d:57:7e:ab:44:99:15:ab:23:4b:53:ba:67:
                    1c:f0:3f:b6:1a:03:6c:28:ee:f4:09:6d:ab:40:2e:
                    4a:9e:b6:fd:f5:d7:54:aa:30:31:50:38:de:09:0c:
                    d3:d7:20:72:af:c6:9a:44:7d:4b:cf:ff:39:75:0f:
                    57:f8:98:07:76:32:e1:f1:cb:04:16:51:9b:04:9a:
                    29:06:a2:40:19:d4:bb:0b:1f:b2:49:61:e6:03:86:
                    be:28:30:b9:ad:30:91:bb:c7:d5:38:a2:ab:fc:8f:
                    18:d4:ed:0b:11:56:1c:9b:48:b5:11:a4:25:ca:09:
                    2f:c0:e5:ae:a6:c0:61:23:6a:0e:ce:a9:93:c9:ba:
                    2b:04:c1:b7:09:43:b5:81:dd:4f:77:1f:ab:36:e6:
                    22:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EC:BD:D8:5B:09:01:42:91:E8:78:5E:41:7E:46:FA:0A:BF:DF:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/611fa39f-ab5e-3811-9f35-42f68560182e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:58:f6:b7:e4:12:de:f5:1e:d8:83:79:a3:bc:58:c1:d3:ef:
         98:6f:e7:b9:6b:68:31:64:8f:61:09:4c:b7:0b:ca:cf:e7:6f:
         78:5a:23:49:3b:2d:9b:bf:3a:fb:48:7b:2d:53:58:a9:d3:d8:
         c5:bb:92:f4:66:52:34:8e:94:9c:83:f7:66:ed:3d:91:71:b2:
         55:51:c3:f3:1d:4d:87:2e:3e:b9:2d:15:23:8d:0c:c4:73:ff:
         7d:c6:b6:55:8a:00:3e:78:58:5b:3f:ca:62:c4:2c:cb:de:5a:
         6d:89:ea:0d:eb:d8:41:77:fb:e9:f0:0e:39:76:58:b7:21:d7:
         00:5f:86:52:31:2d:c3:ee:e2:8b:6b:e3:b9:c5:2d:85:64:b6:
         47:9a:2f:75:6d:be:7d:11:c5:98:3a:40:c0:94:c4:65:31:e6:
         06:0b:82:c6:7b:7e:d2:28:d5:3a:ae:a5:93:41:7c:6e:69:42:
         6a:26:57:d8:80:98:9f:b2:d5:06:ef:c4:59:62:ae:a5:14:63:
         03:7e:97:3e:70:28:ea:a9:a2:c7:40:3f:0b:7c:94:23:bc:60:
         89:77:a5:af:7c:12:39:a6:4f:8b:eb:8e:2c:2c:fd:ba:17:d6:
         66:f7:f6:b6:4e:a6:05:68:61:8e:9f:10:37:ec:ac:41:af:3e:
         1b:06:25:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8++JAMlVbFDBRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
YzZhNTAwYzktZTMxOS00MzQ2LWIwNmMtMmRlNzcwMmNmODA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPRc8PiB9fl9Zbtv4yByavlfAzol4R8nx/nc
+AL9iIpVZF6hxPSdh/eAIn1KlunPL1vi86uijmseQXJKNyDDRIawaRDRbqk+oONV
3Vw9M+nTS3pw1+bAub9YaHmzJlmuVr33Cnf5oJG2UE1XfqtEmRWrI0tTumcc8D+2
GgNsKO70CW2rQC5Knrb99ddUqjAxUDjeCQzT1yByr8aaRH1Lz/85dQ9X+JgHdjLh
8csEFlGbBJopBqJAGdS7Cx+ySWHmA4a+KDC5rTCRu8fVOKKr/I8Y1O0LEVYcm0i1
EaQlygkvwOWupsBhI2oOzqmTyborBMG3CUO1gd1Pdx+rNuYi3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHDsvdhbCQFCkeh4XkF+RvoKv99yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjExZmEzOWYtYWI1ZS0z
ODExLTlmMzUtNDJmNjg1NjAxODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq47MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADhY9rfkEt71HtiDeaO8WMHT75hv57lraDFkj2EJTLcLys/nb3haI0k7
LZu/OvtIey1TWKnT2MW7kvRmUjSOlJyD92btPZFxslVRw/MdTYcuPrktFSONDMRz
/33GtlWKAD54WFs/ymLELMveWm2J6g3r2EF3++nwDjl2WLch1wBfhlIxLcPu4otr
47nFLYVktkeaL3Vtvn0RxZg6QMCUxGUx5gYLgsZ7ftIo1TqupZNBfG5pQmomV9iA
mJ+y1QbvxFlirqUUYwN+lz5wKOqposdAPwt8lCO8YIl3pa98EjmmT4vrjiws/boX
1mb39rZOpgVoYY6fEDfsrEGvPhsGJTw=
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:33:57 2025 by rpki-client